Phoenix Group LLC’s Post

Secureworks Announces First Quarter Fiscal 2025 Results USA - English - PR Newswire: Secureworks Announces First Quarter Fiscal 2025 Results USA - English  PR Newswire #CyberSecurity #InfoSec #SecurityInsights

If you had any question about the strength and effectiveness of CrowdStrike, just check out the results from this press release. Quarterly reports aren't everything, but they are clear indication of the trust and confidence you place in us and the direction we are heading. Behind each of these numbers is an organization or company made of of ordinary men and women--you and I--who can sleep easier knowing that THEIR data and information is protected by the best #cybersecurity company in the world. The #adversary never sleeps, neither should those who protect you. Comprised of over 23 modules in one single agent, the adoption rate is something I need to highlight. With every capability deployed, that is another gap and seam closed to the enemy; freeing up valuable time and resources to get after your core business tasks. We don't make the software with the #vulnerabilities, and we don't believe in charging you to secure something we develop. But we protect you from those who mean to exploit those who do. We do one thing--#stopbreaches #smb #dod #cio #ciso Microsoft Security #sltt #cisa Cybersecurity and Infrastructure Security Agency #cybersecurity #cyberdefense #ir #zeroday #zerotrust

During 2023, the #SEC continued its trend from 2022, actively engaging in regulatory rulemaking, providing disclosure guidance, and undertaking enforcement actions related to public disclosures and disclosure controls. Read our latest Advisory with Teresa Johnson Jane Norberg Sara Adler Joel I. GreenbergPaul Nabhan an Kexi J. for a summary of the relevant SEC rules and guidance that we expect to have an impact on the upcoming annual reporting and proxy season for calendar year reporting companies ➡️ https://bit.ly/3rs5D0A   #corporategovernance #cybersecurity #compliance

I found the attached article to be one of the more interesting, thought-provoking cyber-risk articles I've seen in quite some time. A few years ago, I listened to a super cyber-savvy Fortune 500 executive describe the relative immaturity of cybersecurity as compared to the accounting profession with all its rules, controls, and mountains of underlying literature. In the attached article, the analogy of Solar Winds possibly being cybersecurity's "ENRON Moment" was intriguing. As we all know, the ENRON debacle led to the Sarbanes-Oxley Act of 2002 (among other outcomes) and was a game changer for many reasons. And the confidence in financial reporting has generally improved over the last 20 years. Among the biggest changes SOX required was for public company CEOs and CFOs to personally certify financial statements. Make no mistake about it, the SEC's recent cyber requirements fall well short of such similar certifications, but it makes me wonder who would (or could) actually sign a similar certification for cyber-risk? And, should a Board wait for the SEC to require such a certification, or should it ask for such well in advance of a regulatory requirement? And, who would the Board ask to sign such "internal" certifications - the CEO, CFO, CRO, or CISO? And lest we all forget, much of cyber-risk resides in our collective supply chains full of small, private companies who aren't subject to SEC requirements. So the tangled web of cyber-risk gets mighty unwieldy in a hurry, especially when Corporate America is hurtling forward with investments in AI without full understanding of inherent risks. So I'll pause there for a moment and remain curious about what the deep-thinkers on cyber-risk see as a practical path forward. Is "certification" a critical success factor along that path? Is it practical? Suffice it to say, this article really got me wondering....

We continue to see companies expand the scope of their audit committees' roles and responsibilities — something consistent with the continued increase in voluntary disclosures noted by recent research from EY. Investors, in particular, are especially interested in the oversight of nonfinancial risks like #cybersecurity, now a priority for 75% of surveyed firms. Focus on ESG has also seen significant growth, rising 29% — up from 11% in 2021. For a closer look at how the role of audit committees has been evolving, I recommend this latest report. https://lnkd.in/g-EBRpVD

In recent years, pressures surrounding cybersecurity including the rising escalation of cyberattacks, associated business risks, costs and regulation, have increasingly weighed on the minds of CFOs. With new rules surrounding the disclosure of cyber attacks put into effect by the U.S. Securities and Exchange Commission, companies and their CFOs are scrambling to ensure they have the proper policies in place. In this Deep Dive, experts including Seth Cohen, CFO of DMK Pharmaceuticals Corporation, Danette Edwards a partner at Katten Muchin Rosenman LLP, and Josh Schauer, vice president of finance at insightsoftware, talk with CFO Dive about the impact of the new rules and what this means for financial executives.   #compliance #cybersecurity #disclosures https://lnkd.in/gDv2CRwh

Today is the first day that public companies must comply with the SEC's new cybersecurity disclosure mandates. The rules, which originally went into effect in September, require all public companies to disclose any material cybersecurity incidents within four days of a material breach. The rules will go into effect for smaller reporting companies on June 5. Read more about how the new requirements will be enforced in CFO Dive.   https://lnkd.in/gNSvDvVp

  Cybersecurity pressures stretch CFOs: Today is the first day that public companies must comply with the SEC's new cybersecurity disclosure mandates. The rules, which originally went into effect in September, require all public companies to disclose any material cybersecurity incidents within four days of a material breach. The rules will go into effect for smaller reporting companies on June 5. Read more about how the new requirements will be enforced in CFO Dive.   https://lnkd.in/evA4V9KM   #SECRegulation #Cybersecurity #FinancialReporting

A recent poll by Deloitte found that almost half of executives expect the number and size of cyber events targeting accounting and financial data to increase in 2023. 📈 This comes after a staggering 300% increase in cyberattacks that occurred in 2020 following the pandemic. #financialinstitutions #cybercrime #cybersecurityawareness https://lnkd.in/drPXxegf

The SEC's new rules on cyber are stretching the role of the CFO and adding more pressure to an already stressful position. I was happy to contribute to this article and share my thoughts on how CFOs can best manage cyber risk.